Jackson 2.9.8 已发布，更新内容如下:

core

Streaming

  • #488: Fail earlier on coercions from "too big" BigInteger into fixed-size types (int, long, short)

  • Improve exception message for missing Base64 padding

Databind

  • #1662: ByteBuffer serialization is broken if offset is not 0

  • #2155: Type parameters are checked for equality while isAssignableFrom expected

  • #2167: Large ISO-8601 Dates are formatted/serialized incorrectly

  • #2181: Don't re-use dynamic serializers for property-updating copy constructors

  • #2183: Base64 JsonMappingException: Unexpected end-of-input

  • #2186: Block more classes from polymorphic deserialization (CVE-2018-19360, CVE-2018-19361, CVE-2018-19362)

  • #2197: Illegal reflective access operation warning when using java.lang.Void as value type

data formats

Protobuf

  • #140: Stack overflow when generating Protobuf schema on class containing cyclic type definition

Smile

  • #153: Unable to set a compression input/output decorator to a SmileFactory

XML

  • #270: Add support for writeBinary() with InputStream to ToXMLGenerator

  • #323: Replace slow string concatenation with faster StringBuilder (for long text content)

YAML

  • #99: YamlGenerator closes the target stream when configured not to

datatypes

Java 8

  • #90: Performance issue with malicious BigDecimal input, InstantDeserializer, DurationDeserializer